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FINAL ACTION 

1 . Amendment A, received on 22 September 2008, has been entered into record. 
In this amendment, claims 1-6, 8, and 12-18 have been amended. 

2. Claims 1-30 are presented for examination. 

Response to Arguments 

3. Applicant's arguments filed 22 September 2008 have been fully considered but 
they are not persuasive. 

As to claim 13, it is argued by the applicant that Gilbert does not disclose having 
a third exponent equal to the first exponent multiplied by a random integer. The 
examiner respectfully disagrees. Gilbert discloses that the exponent is chosen and is 
related to a desired security level (col. 7, lines 1-5; col. 8, lines 33-44). The examiner 
asserts that it would have been obvious to multiply the exponent with another number in 
order to achieve a desired security level and that using a resulting product as an 
exponent would be equivalent to using two numbers multiplied together. 

As to claims 1-2,11,16 and 1 7, in response to applicant's argument that the 
references fail to show certain features of applicant's invention, it is noted that the 
feature upon which applicant relies (i.e., the absence of actual transaction from the 
verifier (B) to the prover (A)) is not recited in the rejected claim(s). Although the claims 
are interpreted in light of the specification, limitations from the specification are not read 
into the claims. See In re Van Geuns, 988 F.2d 1181, 26 USPQ2d 1057 (Fed. Cir. 
1993). 



Application/Control Number: 10/519,698 Page 3 

Art Unit: 2431 

Further, as to claims 1-2, 1 1, 16, and 17, it is argued by the applicant that the 
cryptographic scheme of Gilbert is different from the cryptographic scheme of the 
claimed invention. The examiner respectfully disagrees. Gilbert discloses that 
identification and signature schemes can be placed in families: schemes based on the 
difficulty of factorizing a large number (e.g. Fiat and Shamir, Guillou and Quisquater), 
schemes based on the difficulty of the problem of discrete logarithm in a large finite 
group, and schemes based on the difficulty of problems not resulting from the algebraic 
theory of numbers (col. 1 , lines 58-64; col. 2, lines 29-30, 47-49). It would have been 
well known in the art to use different identification and signature schemes to achieve the 
claimed invention. 

In response to applicant's argument that M'Raihi does not intend to skip 
corresponding modular multiplication operations, but operates to lighten the 
corresponding computation burden, the fact that applicant has recognized another 
advantage which would flow naturally from following the suggestion of the prior art 
cannot be the basis for patentability when the differences would otherwise be obvious. 
See Ex parte Obiaya, 227 USPQ 58, 60 (Bd. Pat. App. & Inter. 1985). 

As to claims 12 and 18, in response to applicant's argument that the references 
fail to show certain features of applicant's invention, it is noted that the features upon 
which applicant relie (i.e., where the third entity is not a trust entity to second verifier 
entity B) is not recited in the rejected claim(s). Although the claims are interpreted in 
light of the specification, limitations from the specification are not read into the claims. 
See In re Van Geuns, 988 F.2d 1 181 , 26 USPQ2d 1057 (Fed. Cir. 1993). 
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As to claims 19 and 27, in response to applicant's argument that there is no 
suggestion to combine the references, the examiner recognizes that obviousness can 
only be established by combining or modifying the teachings of the prior art to produce 
the claimed invention where there is some teaching, suggestion, or motivation to do so 
found either in the references themselves or in the knowledge generally available to one 
of ordinary skill in the art. See In re Fine, 837 F.2d 1071, 5 USPQ2d 1596 (Fed. Cir. 
1988) and In re Jones, 958 F.2d 347, 21 USPQ2d 1941 (Fed. Cir. 1992). In this case, 
M'Raihi recites motivation by disclosing that an exponent is necessary for each 
signature and creating an exponent using small coefficients in a linear combination 
would prevent attacks (col. 5, lines 49-52). It is obvious that the teachings of Gilbert 
and M'Raihi would have benefited from the teachings of Kasahara by using an exponent 
in the form of a linear combination in order to create a signature that is protected 
against attacks. 

As to claims 3 and 4, in response to applicant's argument that the references fail 
to show certain features of applicant's invention, it is noted that the feature upon which 
applicant relies (i.e., where the transaction between the claimant and the verifier takes 
places without a question) is not recited in the rejected claim(s). Although the claims 
are interpreted in light of the specification, limitations from the specification are not read 
into the claims. See In re Van Geuns, 988 F.2d 1181, 26 USPQ2d 1057 (Fed. Cir. 
1993). 

As to claim 15, it is argued that Arditti does not disclose a Carmichael function. 
The examiner respectfully disagrees. Arditti discloses that the order is defined such that 
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g k =1 mod n (col. 4, lines 48-50). It is well known in the art that the Carmichael function 
is defined such that a m =1 mod n. 

Claim Objections 

4. Claim 13 is objected to because of the following informalities: in line 8: "power 
device" should read -prover device-. Appropriate correction is required. 

Drawings 

5. The drawings were received on 22 September 2008. These drawings are 
acceptable. 

Claim Rejections - 35 USC §112 

6. The following is a quotation of the second paragraph of 35 U.S.C. 1 12: 

The specification shall conclude with one or more claims particularly pointing out and distinctly 
claiming the subject matter which the applicant regards as his invention. 

7. Claim 8 is rejected under 35 U.S.C. 112, second paragraph, as being indefinite 
for failing to particularly point out and distinctly claim the subject matter which applicant 
regards as the invention. 

The term "substantially greater" in claim 8, lines 2-3 is a relative term which renders the 
claim indefinite. The term "substantially greater" is not defined by the claims, the 
specification does not provide a standard for ascertaining the requisite degree, and one 
of ordinary skill in the art would not be reasonably apprised of the scope of the 
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invention. As a result, the language does not provide a clear definable value of the 
value of the private key in claim 8. 

It is noted that the applicant has amended the claim to clarify the term "substantially 
greater" as in relation to a mathematical problem of a discrete logarithm. However, this 
does not definitively define the term "substantially" which is ambiguous. 

Claim Rejections - 35 USC § 103 

8. The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

9. Claim 13 is rejected under 35 U.S.C. 103(a) as being unpatentable over Gilbert 
et al. (US Patent 5,987,138 and Gilbert hereinafter). 

Gilbert discloses a system and method for identification and signature verification, the 

system and method having: 

calculation means for generating a first element of proof (i.e. x) 
completely or partly independently of the transaction, said first element of 
proof being generated by said power device by raising a generic number 
(i.e. r) to a second power modulo (col. 7, lines 32-33), and for generating a 
second element of proof (i.e. y) related to the first element of proof and 
dependent on a common number (i.e. a) specific to the transaction (col. 7, 
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lines 32-33, 43-45), but does not disclose the modulus having a third 
exponent equal to the first exponent of the public key multiplied by a 
random integer kept secret by the prover device. Gilbert teaches that it is 
known to choose an exponent according to the desired security level (col. 7, lines 
1-5; col. 8, lines 33-44). It would have been obvious to one of ordinary skill in the 
art at the time the invention was made to multiply the exponent by an integer in 
order to achieve the desired security level. 
Gilbert discloses: 

communication means for transmitting at least the first and second 
elements of proof (i.e. x and y) and for transmitting said common number 
(i.e. set of numbers) to the verifier device or receiving said common number 
from the verifier device (col. 7, lines 32-33, 40-41 , 51). 

1 0. Claims 1 -2, 1 1 , 1 6-1 7 are rejected under 35 U.S.C. 1 03(a) as being unpatentable 
over Gilbert in view of M'Raihi et al. (US Patent 5,946,397 and M'Raihi hereinafter). 
As to claims 1 and 16, Gilbert discloses: 

generating a first element of proof (i.e. x) at the first entity (i.e. 
claimant), whereby calculation of said first element of proof is executable 
independently of the transaction (col. 7, lines 32-33); 

generating, at the first entity, a second element of proof (i.e. answer 
y) related to the first element of proof and dependent on a common number 
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(i.e. a,) shared by the first and second entities specifically for the 
transaction (col. 7, lines 43-45). 

Gilbert does not disclose: 

verifying, at the second entity that the first element of proof is related 
through a relationship with a first power modulo the modulus of a generic 
number having a second exponent equal to a linear combination of at least 
part of the common number and of the first exponent of the public key 
multiplied by the second element of proof. 

Nonetheless, this feature is well known in the art and would have been an obvious 

modification of the teachings disclosed by Gilbert, as evidenced by M'Raihi. 

M'Raihi discloses a system and method for cryptography with public key based on the 

discrete logarithm, the system and method having: 

verifying, at the second entity that the first element of proof (i.e. x) is 
related through a relationship with a first power modulo the modulus (i.e. p) 
of a generic number (i.e. g) having a second exponent (i.e. k) equal to a 
linear combination of at least part of the common number and of the first 
exponent of the public key multiplied by the second element of proof (col. 
2, lines 4-49). 

Given the teaching of M'Raihi, a person having ordinary skill in the art at the time of the 
invention would have readily recognized the desirability and advantages of modifying 
the teachings of Gilbert with the teachings of M'Raihi by verifying a relationship through 
the use of a linear combination exponent. M'Raihi recites motivation by disclosing that 
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an exponent is necessary for each signature and creating an exponent using small 
coefficients in a linear combination would prevent attacks (col. 5, lines 49-52). It is 
obvious that the teachings of Gilbert would have benefited from the teachings of M'Raihi 
by using an exponent in the form of a linear combination in order to create a signature 
that is protected against attacks. 

As to claim 2, Gilbert discloses: 

wherein for identifying the first entity, the first element of proof (i.e. 
x) is generated by the first entity by raising the generic number (i.e. r) to a 
second power modulo the modulus (i.e. n) having a third exponent equal to 
the first exponent of the public key (i.e. e) multiplied by a random integer 
kept secret by the first entity (col. 7, lines 32-33); 

wherein the common number (i.e. a\) is chosen randomly from within 
a security interval [0, 1 1] (i.e. 0, e-1) and then sent by the second entity (i.e. 
verifier) after having received the first element of proof (col. 7, lines 38-39); 

wherein the relationship verified by the second entity (i.e. verifier) is 
an equality relationship between a power of the first element of proof (i.e. x) 
and the first power of the generic number (col. 7, lines 54, 62-63). 



As to claim 1 1 , Gilbert discloses: 
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wherein the generic number is transmitted with the public key, the 
generic number being equal to a simple number raised to a power modulo 
the modulus with the private key as exponent (col. 7, lines 19-22). 

As to claim 17, Gilbert discloses: 

wherein the communication means is designed to receive the second 
element of proof (i.e. y) (col. 7, line 51) and wherein the calculation means is 
designed to calculate the second exponent and said first power of the 
generic number (col. 7, line 47). 

1 1 . Claims 1 2 and 1 8 are rejected under 35 U.S.C. 1 03(a) as being unpatentable 
over Gilbert in view of M'Raihi as applied to claims 1 and 16 above, and further in view 
of Brickell (US Patent 7,165,181 B2). 

As to claims 12 and 18, Gilbert in view of M'Raihi does not disclose: 

receiving the second element of proof at a third entity; 

generating a third element of proof at the third entity by raising the 
generic number to a power modulo the modulus with the second element 
of proof as exponent; 

sending the third element of proof to the second entity; 

at the second entity, raising the third element of proof to a power of 
the first exponent, modulo the modulus, and multiplying the result thereof 
by the generic number raised to a power whose exponent is the common 
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number in order to verify the relationship relating the first element of proof 
to the second element of proof. 

Nonetheless, these features are well known in the art and would have been an obvious 
modification of the teachings disclosed by Gilbert in view of M'Raihi, as evidenced by 
Brickell. 

Brickell discloses a system and method for establishing trust without revealing identity, 
the system and method having: 

receiving the second element of proof (i.e. m ) at a third entity (i.e. 
Certifying Manufacturer) (col. 5, lines 1-2); 

generating a third element of proof (i.e. c ) at the third entity by 
raising the generic number to a power modulo the modulus with the 
second element of proof as exponent (col. 5, lines 2-3); 

sending the third element of proof to the second entity (i.e. device) 
(col. 5, line 3); 

at the second entity, raising the third element of proof to a power of 
the first exponent, modulo the modulus, (col. 5, lines 3-4) and multiplying 
the result thereof by the generic number raised to a power whose exponent 
is the common number in order to verify the relationship relating the first 
element of proof to the second element of proof (col. 5, lines 5-6; col. 6, lines 
18-25). 

Given the teaching of Brickell, a person having ordinary skill in the art at the time of the 
invention would have readily recognized the desirability and advantages of modifying 
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the teachings of Gilbert in view of M'Raihi with the teachings of Brickell by using a third 
entity and signature in the verification process. Brickell recites motivation by disclosing 
that a cryptographic protocol that achieves anonymity and security requirements without 
the use of a conventional trusted third party is needed (col. 1, lines 49-52), which can be 
achieved through the use of a trusted platform module that proves the possession of a 
signature without revealing the signature (col. 5, lines 8-10). It is obvious that the 
teachings of Gilbert in view of M'Raihi would have benefited from the teachings of 
Brickell by using a third entity in the verification process in order to maintain security 
anonymously. 

12. Claims 1 9 and 27 are rejected under 35 U.S.C. 1 03(a) as being unpatentable 
over Gilbert in view of M'Raihi as applied to claim 2 above, and further in view of 
Kasahara et al. (US Patent 6,788,788 B1 and Kasahara hereinafter). 
As to claims 19 and 27, Gilbert in view of M'Raihi does not disclose: 

wherein the common number comprises first and second elementary 
common numbers, wherein the second element of proof is generated by 
the first entity by subtracting, from the random integer multiplied by the 
first elementary common number, the private key multiplied by the second 
elementary common number, wherein the linear combination equal to the 
second exponent comprises a zero coefficient for the first elementary 
common number, a positive unitary coefficient for the second elementary 
common number and a positive unitary coefficient for the first exponent of 
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the public key multiplied by the second element of proof, and wherein, in 
the verified relationship, the first element of proof is considered with an 
exponent power equal to the first elementary common number. 

Nonetheless, this feature is well known in the art and would have been an obvious 
modification of the teachings disclosed by Gilbert in view of M'Raihi, as evidenced by 
Kasahara. 

Kasahara discloses a system and method for cryptographic communication with high 

security, the system and method having: 

wherein the common number comprises first and second elementary 
common numbers, wherein the second element of proof is generated by 
the first entity by subtracting, from the random integer multiplied by the 
first elementary common number, the private key multiplied by the second 
elementary common number (col. 16, lines 40-41), wherein the linear 
combination equal to the second exponent comprises a zero coefficient for 
the first elementary common number, a positive unitary coefficient for the 
second elementary common number and a positive unitary coefficient for 
the first exponent of the public key multiplied by the second element of 
proof (col. 6, line 52), and wherein, in the verified relationship, the first 
element of proof is considered with an exponent power equal to the first 
elementary common number (col. 8, line 36; col. 9, line 1). 

Given the teaching of Kasahara, a person having ordinary skill in the art at the time of 

the invention would have readily recognized the desirability and advantages of 
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modifying the teachings of Gilbert in view of M'Raihi with the teachings of Kasahara by 
using small coefficients to create an exponent from a linear combination to be used in 
the verification process. M'Raihi recites motivation by disclosing that an exponent is 
necessary for each signature and creating an exponent using small coefficients in a 
linear combination would prevent attacks (col. 5, lines 49-52). It is obvious that the 
teachings of Gilbert and M'Raihi would have benefited from the teachings of Kasahara 
by using an exponent in the form of a linear combination in order to create a signature 
that is protected against attacks. 

1 3. Claims 3 and 4 are rejected under 35 U.S.C. 1 03(a) as being unpatentable over 

Gilbert in view of M'Raihi as applied to claim 1 above, and further in view of Arditti et al. 

(US Patent 6,125,445 and Arditti hereinafter). 

As to claims 3 and 4, Gilbert combined with M'Raihi discloses: 

wherein the common number is chosen at random from within a 
security interval [0,t 1] (i.e. 0, e-1 ) and then sent by the second entity (i.e. 
verifier) after having received the first element of proof (col. 7, lines 38-40). 

Gilbert in view of M'Raihi does not disclose: 

wherein for authenticating that a message received by the second 
entity comes from the first entity, the first element of proof is generated by 
the first entity by applying a hash function to the message and to the 
generic number raised to a second power modulo the modulus having a 
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third exponent equal to the first exponent of the public key multiplied by a 
random integer kept secret by the first entity; 

wherein the relationship verified by the second entity is an equality 
relationship between the first element of proof and a result of said hash 
function applied to the message and to the first power of the generic 
number. 

Nonetheless, these features are well known in the art and would have been an obvious 
modification of the teachings disclosed by Gilbert in view of M'Raihi, as evidenced by 
Arditti. 

Arditti discloses a system and method for public key identification using two hash 

functions, the system and method having: 

wherein for authenticating that a message received by the second 
entity comes from the first entity, the first element of proof (i.e. H(y)) is 
generated by the first entity by applying a hash function to the message 
and to the generic number raised to a second power modulo the modulus 
having a third exponent equal to the first exponent of the public key 
multiplied by a random integer kept secret by the first entity (col. 5, lines 16- 
18); 

wherein the relationship verified by the second entity is an equality 
relationship between the first element of proof and a result of said hash 
function applied to the message and to the first power of the generic 
number (col. 5, lines 29-31 ). 
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Given the teaching of Arditti, a person having ordinary skill in the art at the time of the 
invention would have readily recognized the desirability and advantages of modifying 
the teachings of Gilbert in view of M'Raihi with the teachings of Arditti by using a hash 
function in order to verify a signature of an entity. Arditti recites motivation by disclosing 
that security can be increased by being able to perform identity verification without 
having to reveal secrets (col. 1, lines 11-13), which can be achieved through disguising 
information (such as through the use of a hash function). It is obvious that the 
teachings of Arditti would have improved the teachings of Gilbert in view of M'Raihi by 
providing for use of a hash function for verification in order to increase security by 
performing verification without revealing secrets that could be used maliciously. 

14. Claims 5-1 0, 23-26 are rejected under 35 U.S.C. 1 03(a) as being unpatentable 
over Gilbert in view of M'Raihi and Arditti as applied to claims 3 and 4 above, and 
further in view of Kasahara. 

As to claims 5 and 6, Gilbert combined with M'Raihi and Arditti discloses: 

wherein, in the verified relationship, the first element of proof (i.e. x) 
is considered with an exponent power equal to the first elementary 
common number (i.e. a t ) (col. 7, line 59). 
Gilbert combined with M'Raihi and Arditti does not disclose: 

wherein the common number comprises first and second elementary 
common numbers, wherein the second element of proof is generated by 
the first entity by subtracting, from the random integer multiplied by the 
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first elementary common number, the private key multiplied by the second 
elementary common number; 

wherein the linear combination equal to the second exponent 
comprises a zero coefficient for the first elementary common number, a 
positive unitary coefficient for the second elementary common number and 
a positive unitary coefficient for the first exponent of the public key 
multiplied by the second element of proof. 

Nonetheless, these features are well known in the art and would have been an obvious 

modification of the teachings disclosed by Gilbert in view of M'Raihi and Arditti, as 

evidenced by Kasahara. 

Kasahara discloses: 

wherein the common number comprises first and second elementary 
common numbers (i.e. coefficients), wherein the second element of proof 
(i.e. tz) is generated by the first entity by subtracting, from the random 
integer multiplied by the first elementary common number, the private key 
multiplied by the second elementary common number (col. 1 6, lines 40-41 ); 

wherein the linear combination equal to the second exponent 
comprises a zero coefficient for the first elementary common number (i.e. 
Y), a positive unitary coefficient for the second elementary common 
number and a positive unitary coefficient for the first exponent of the 
public key (i.e. A) multiplied by the second element of proof (i.e. v) (col. 6, 
line 52). 
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Given the teaching of Kasahara, a person having ordinary skill in the art at the time of 
the invention would have readily recognized the desirability and advantages of 
modifying the teachings of Gilbert in view of M'Raihi and Arditti with the teachings of 
Kasahara by using small coefficients to create an exponent from a linear combination to 
be used in the verification process. Please refer to the motivation as recited above as 
to claims 12 and 18 why it is obvious to apply the teachings of Kasahara and the use of 
small coefficients in a linear combination for the verification process to the teachings of 
Gilbert in view of M'Raihi. 

As to claim 23, Gilbert in view of M'Raihi and Arditti does not disclose: 

wherein the second element of proof is generated by the first entity 
by subtracting, from the random integer, the private key multiplied by the 
common number, wherein the linear combination equal to the second 
exponent comprises a positive unitary coefficient for the common number 
and a positive unitary coefficient for the first exponent of the public key 
multiplied by the second element of proof, and wherein, in the verified 
relationship, the first element of proof is considered with a unitary 
exponent power. 

Nonetheless, this feature is well known in the art and would have been an obvious 
modification of the teachings disclosed by Gilbert in view of M'Raihi and Arditti, as 
evidenced by Kasahara. 
Kasahara discloses: 
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wherein the second element of proof is generated by the first entity 
by subtracting, from the random integer, the private key multiplied by the 
common number (col. 16, lines 40-41 ), wherein the linear combination equal 
to the second exponent comprises a positive unitary coefficient for the 
common number and a positive unitary coefficient for the first exponent of 
the public key multiplied by the second element of proof (col. 6, line 52), and 
wherein, in the verified relationship, the first element of proof is considered 
with a unitary exponent power (col. 4, line 1). 
Given the teaching of Kasahara, a person having ordinary skill in the art at the time of 
the invention would have readily recognized the desirability and advantages of 
modifying the teachings of Gilbert in view of M'Raihi and Arditti with the teachings of 
Kasahara by using small coefficients to create an exponent from a linear combination to 
be used in the verification process. Please refer to the motivation as recited above in 
respect to claims 12 and 18 as to why it is obvious to apply the teachings of Kasahara 
and the use of small coefficients in a linear combination for the verification process to 
the teachings of Gilbert in view of M'Raihi. 

As to claims 7 and 24, Gilbert in view of M'Raihi and further in view of Arditti, combined 

with Kasahara discloses: 

wherein the second element of proof (i.e. y) is calculated modulo an 
image of the modulus via a Carmichael function (i.e. g) or modulo a multiple 
of the order of the generic number modulo the modulus (col. 4, lines 48-50; 
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col. 5, lines 7-8, 16-17) in order to disguise the base used to calculated a 
signature. Arditti recites motivation by disclosing that without the knowledge of 
the base value, a defrauder cannot correctly reply to the verifier (col. 3, lines 63- 
64). It is obvious that the teachings of Gilbert in view of M'Raihi combined with 
Kasahara would have benefited from the teachings of Arditti by hiding the base 
value in order to prevent a correct reply from an unauthorized entity. 



As to claim 8, Gilbert, combined with M'Raihi, Arditti and Kasahara, discloses: 

wherein the random number is substantially greater than the value of 
the private key (i.e. s) in relation to a mathematical problem of a discrete 
logarithm (col. 3, lines 35-36). 



As to claims 9 and 25, Gilbert in view of M'Raihi further in view of Arditti, combined with 

Kasahara discloses: 

wherein the random integer (i.e. m) is less than an image of the 
modulus via a Carmichael function (i.e. k) or less than a multiple of the 
order of the generic number modulo the modulus (col. 4, lines 48-50; col. 7, 
lines 4-5) in order to allow a claimant to be verified without revealing a secret. 
Arditti recites motivation by disclosing that when an integer is close to a multiple 
of k (following the Carmichael Theorem), then a claimant can be simulated 
without knowledge of a secret, thus preventing a defrauder from stealing the 
secret (col. 7, lines 5-9). It is obvious that the teachings of Arditti would have 
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improved the teachings of Gilbert in view of M'Raihi combined with Kasahara by 
using an integer smaller than an image in order to allow a claimant to be verified 
without transferring a secret. 

As to claims 1 0 and 26, Gilbert in view of M'Raihi further in view of Arditti, combined 

with Kasahara discloses: 

wherein the third exponent (i.e. T) is calculated modulo an image of 
the modulus via a Carmichael function (i.e. g) or modulo a multiple of the 
order of the generic number modulo the modulus (col. 5, lines 7-8) in order to 
allow a claimant to be verified without revealing a secret. Please refer to the 
motivation as recited above in respect to claims 9 and 25 as to why it is obvious 
to apply the teachings of Arditti to the teachings of Gilbert in view of M'Raihi and 
Kasahara. 

15. Claims 20-22, 28-30 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Gilbert in view of M'Raihi and Kasahara as applied to claims 19 and 27 above, and 
further in view of Arditti. 

As to claims 20 and 28, Gilbert in view of M'Raihi and Kasahara does not disclose: 

wherein the second element of proof is calculated modulo an image 
of the modulus via a Carmichael function or modulo a multiple of the order 
of the generic number modulo the modulus. 
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Nonetheless, this feature is well known in the art and would have been an obvious 
modification of the teachings disclosed by Gilbert in view of M'Raihi and Kasahara, as 
evidenced by Arditti. 
Arditti discloses: 

wherein the second element of proof (i.e. y) is calculated modulo an 
image of the modulus via a Carmichael function or modulo a multiple of the 
order of the generic number modulo the modulus (col. 4, lines 48-50; col. 5, 
lines 7-8, 16-17). 

Given the teaching of Arditti, a person having ordinary skill in the art at the time of the 
invention would have readily recognized the desirability and advantages of modifying 
the teachings of Gilbert in view of M'Raihi and Kasahara with the teachings of Arditti by 
disguising the base used to calculate a signature. Please refer to the motivation as 
recited above in respect to claims 7 and 24 as to why it is obvious to apply the 
teachings of Arditti to the teachings of Gilbert in view of M'Raihi and Kasahara. 

As to claims 21 and 29, Gilbert in view of M'Raihi and Kasahara does not disclose: 

wherein the random integer is less than an image of the modulus via 
a Carmichael function or less than a multiple of the order of the generic 
number modulo the modulus. 

Nonetheless, this feature is well known in the art and would have been an obvious 
modification of the teachings disclosed by Gilbert in view of M'Raihi and Kasahara, as 
evidenced by Arditti. 
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Arditti discloses: 

wherein the random integer is less than an image of the modulus via 
a Carmichael function or less than a multiple of the order of the generic 
number modulo the modulus (col. 4, lines 48-50; col. 7, lines 4-5). 
Given the teaching of Arditti, a person having ordinary skill in the art at the time of the 
invention would have readily recognized the desirability and advantages of modifying 
the teachings of Gilbert in view of M'Raihi and Kasahara with the teachings of Arditti by 
using an integer smaller than an image in a verification process. Please refer to the 
motivation as recited above in respect to claims 9 and 25 as to why it is obvious to apply 
the teachings of Arditti to the teachings of Gilbert in view of M'Raihi and Kasahara. 

As to claims 22 and 30, Gilbert in view of M'Raihi and Kasahara does not disclose: 
wherein the third exponent is calculated modulo an image of the 
modulus via a Carmichael function or modulo a multiple of the order of the 
generic number modulo the modulus. 

Nonetheless, this feature is well known in the art and would have been an obvious 
modification of the teachings disclosed by Gilbert in view of M'Raihi and Kasahara, as 
evidenced by Arditti. 
Arditti discloses: 

wherein the third exponent (i.e. T) is calculated modulo an image of 
the modulus via a Carmichael function (i.e. g) or modulo a multiple of the 
order of the generic number modulo the modulus (col. 5, lines 7-8). 
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Given the teaching of Arditti, a person having ordinary skill in the art at the time of the 
invention would have readily recognized the desirability and advantages of modifying 
the teachings of Gilbert in view of M'Raihi and Kasahara with the teachings of Arditti by 
using an image in a verification process. Please refer to the motivation as recited above 
in respect to claims 9 and 25 as to why it is obvious to apply the teachings of Arditti to 
the teachings of Gilbert in view of M'Raihi and Kasahara. 

16. Claim 14 is rejected under 35 U.S.C. 103(a) as being unpatentable over Gilbert 

as applied to claim 13 above, and further in view of Kasahara. 

As to claim 14, Gilbert discloses: 

wherein the calculation means is, on the one hand, designed to 
generate a first random number and to raise a generic number to a second 
power modulo the modulus having a third exponent equal to the first 
exponent of the public key (i.e. e) multiplied by the random integer (col. 7, 
lines 32-33). 

Gilbert does not disclose: 

wherein the calculation means is, on the other hand designed to 
generate the second element of proof by taking the difference between the 
random integer and the private key multiplied by the common number or, 
where the common number is split into two elementary common numbers, 
by subtracting from the random integer multiplied by the first elementary 
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common number, the private key multiplied by the second elementary 
common number. 

Nonetheless, this feature is well known in the art and would have been an obvious 
modification of the teachings disclosed by Gilbert, as evidenced by Kasahara. 
Kasahara discloses: 

wherein the calculation means is, on the other hand designed to 
generate the second element of proof by taking the difference between the 
random integer and the private key multiplied by the common number or, 
where the common number is split into two elementary common numbers, 
by subtracting from the random integer multiplied by the first elementary 
common number, the private key multiplied by the second elementary 
common number (col. 6, line 52; col. 16, lines 40-41). 
Given the teaching of Kasahara, a person having ordinary skill in the art at the time of 
the invention would have readily recognized the desirability and advantages of 
modifying the teachings of Gilbert with the teachings of Kasahara by using small 
coefficients to create an exponent from a linear combination to be used in the 
verification process. Please refer to the motivation as recited above in respect to claims 
12 and 18 as to why it is obvious to apply the teachings of Kasahara and the use of 
small coefficients in a linear combination for the verification process to the teachings of 
Gilbert in view of M'Raihi. 



Application/Control Number: 10/519,698 Page 26 

Art Unit: 2431 

17. Claim 15 is rejected under 35 U.S.C. 103(a) as being unpatentable over Gilbert 
in view of Kasahara as applied to claim 14 above, and further in view of Arditti. 
As to claim 15, Gilbert in view of Kasahara does not disclose: 

wherein the calculation means is designed to carry out operations 
modulo an image of the modulus via a Carmichael function or modulo a 
multiple of the order of the generic number modulo the modulus. 
Nonetheless, this feature is well known in the art and would have been an obvious 
modification of the teachings disclosed by Gilbert in view of Kasahara, as evidenced by 
Arditti. 

Arditti discloses: 

wherein the calculation means is designed to carry out operations 
modulo an image of the modulus via a Carmichael function or modulo a 
multiple of the order of the generic number modulo the modulus (col. 4, 
lines 48-50). 

Given the teaching of Arditti, a person having ordinary skill in the art at the time of the 
invention would have readily recognized the desirability and advantages of modifying 
the teachings of Gilbert in view of Kasahara with the teachings of Arditti by providing for 
a way to disguise a value used to calculated a signature. Please refer to the motivation 
as recited above in respect to claims 7 and 24 as to why it is obvious to apply the 
teachings of Arditti to the teachings of Gilbert in view of M'Raihi and Kasahara. 
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Conclusion 

18. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1 .136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Sarah Su whose telephone number is (571) 270-3835. 
The examiner can normally be reached on Monday through Friday 7:30AM-5:00PM 
EST.. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh can be reached on (571 ) 272-3795. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



/Christopher A. Revak/ 
Primary Examiner, Art Unit 2431 



/Sarah Su/ 

Examiner, Art Unit 2431 



